What is claimed is: 



1. A smaul footprint device comprising: 

a. at leas\ one processing element; 

b. memory, 

c. a context\ barrier for isolating one program 
module from at least\ one other program module using said 
memory and processing element , and 

d. an entry point >object for permitting one program 
module to access one oqjier program module across said 
context barrier. 

2 . The small footprint device of claim 1 in which 
said one other program npdule is a supercontext of said 
one program module , 



3 . The small f ootpr:i\iv£device of claim 2 in which 
said entry point object/\can access program modules 
regardless of the memory 

\ 



in which they are located. 



4. The small footprint* device of claim 1 in which 
said entry point object contains an access method having 
privileges to access at le^st said another program 
module . 
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5. The small footprint device of claim 1 in which 
said entry point object calls an object to be accessed in 



said other program module and switches context to said 
other program module I 

6. The small footprint device of claim 5 in which 
said other program module performs access to said object 
to be accessed and returns the results of said call to 
said one program module 



7. The small footprint device of claim 1 in which 
said context barrier allocates separate name spaces for 
each program module , 

8. The small fd^th^int device of claim 1 in which 
said context barrier allocates separate memory spaces for 
each program module . 

9 . The small footprint device of claim 1 in which 
said processing element iis single threaded. 



10. The small footprint device of claim 9 in which 
the processing element ru^s each program module as a 
separate context . 
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11. The small footprint device of claim 10 in which 

\ 

said entry point object} issues a call to a program module 
containing an object toibe accessed and then causes said 
processing element to switch context to the programming 
module containing said object to be accessed. 

12. The small footprint device of claim 1 in which 
at least one program mopule comprises a plurality of 
applets . 

13 . The small footprint device of claim 1 in which 
said context barrier enf orqas^security checks on at least 



one of a principal, an ob; 



&ct land an action. 



14 . The small footprint deVice of claim 13 in which 
at least one security check is based on partial name 
agreement between a principalL and an object. 

15. The small footprint Idevice of claim 14 in which 
said entry point object can access objects without said 
at least one security check. 

16. The small footprint device of claim 13 in which 
at least one security check is based on memory space 
agreement between a principal amd an object. 
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17. The smal'l\ footprint device of claim 16 in which 
i 
\ 

said entry point object can access objects without said 

I 

at least one security check. 



18 . A method of 
comprising the step 
a context barrier 



operating a small footprint device, 
of separating program modules using 
nd permitting access across the 



context barrier using! an entry point object. 

19. The method of claim 18, in which the context 
barrier is implemented fusing a single threaded processing 
element . 



20. The method ^claim 18, in which said entry 

point object accepts tfeduhsts from one program module for 

access to an object v^pcfl then switches context to a 

1 I 

program module containing said object where the access 
can be performed. 



21. The method of Iclaim 19 in which the context 
barrier will not permit alprincipal to perform an action, 
on an object unless both principal and object are part of 
the same context and the action is appropriate for the 
object unless the request\ comes via an entry point 
obj ect . 
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22. A computer program product, comprising: 

\ 

a . a memory medium^ and 

b. a computer controlling element comprising 
instructions for implementing a context barrier on a 
small footprint device and for bypassing said context 
barrier using a an entry Ipoint object. 

23 . The computer program product of claim 22 in 
which said memory medium ils a carrier wave . 

24. A computer program product, comprising: 

a. a memory medium; anp 

b. a computer controlling element comprising 
instructions for separating k^plurality of programs on a 
small footprint device by/ running them in respective 
contexts and for permitting^ ome/ program to access another 
program using an entry point lojbject. 

25. The computer program product of claim 24 in 
which said memory medium is a Icarrier wave. 

26. The computer program product of claim 24 in 
which said another program is a programming running as a 
supercontext of said one prograrA. 
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27. A carrier wave carrying instructions for 
implementing an entry point object for bypassing a 
context barrier on a small footprint device over a 



communications link . 



1 



28. A carrier wave j carrying instructions over a 

i 

communications link for i separating a plurality of 

1 

programs on a small footprint device by running them in 
respective contexts and fdr jp^rmitting. one program to 
access another program u^irijg ^n entry point object. 



29. A method of transmitting code over a network, 
comprising the step of transmitting a block of code from 
a server, said block of code comprising instructions for 
implementing an entry point object for providing access 
across a context barrier. 
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